CVE-2024-26169—Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

Vulnerability Name

Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

Description

Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Additional Notes

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26169
• https://nvd.nist.gov/vuln/detail/CVE-2024-26169

Related News Articles

• Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. OrganizationMay 7, 2025
• Black Basta ransomware gang linked to Windows zero-day attacksJune 12, 2024
• CISA warns of Windows bug exploited in ransomware attacksJune 14, 2024
• Black Basta ransomware gang linked to Windows zero-day attacksJune 12, 2024

Related Weaknesses

• CWE-269